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IN THE CLAIMS: 
Amended claims follow: 

1 . (Currently Amended) A method of authorising an additional computer program 
module for use with a core computer program, said core computer program being 
installed, said method comprising the steps of: 

reading module signature data associated with said additional computer program 
module; 

reading core signature data and other signature data associated with said core 
computer program; 

wherein said other signature data is user signature data; 

comparing said module signature data with said core signature data and said ether 
user signature data; and 

refusing authorisation of said additional computer program module for use with 
said core computer program unless said module signature data matches at least one of 
said core signature data and said ethe? user signature data; 

wherein the user signature data allows a particular user to authori ze the additional 
computer program module for use with the installed core co mputer program. 

2. (Cancelled) 

3. (Currently Amended) A method as claimed in claim 1, wherein said additional 
computer program module is refused authorisation for use with said core computer 
program unless said module signature data matches both of said core signature data and 
said oth e r user signature data. 

4. (Currently Amended) A method as claimed in claim 1 , wherein said module 
signature data, said core signature data and said ether user signature data include public 
key infrastructure signatures. 
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5. (Currently Amended) A method as claimed in claim 1, wherein said ether user 
signature data is associated with said core computer program upon installation of said 
core computer program. 

6. (Currently Amended) A method as claimed in claim 5 wherein said other user 
signature data is embedded within said core computer program. 

7. (Original) A method as claimed in claim 2, wherein said user signature data is 
embedded within said core computer program by applying a user specific patch to said 
core computer program. 

8. (Original) A method as claimed in claim 1, wherein said core signature data is 
associated with said core computer program upon generation of said core computer 
program. 

9. (Original) A method as claimed in claim 8, wherein said core signature data is 
embedded within said core computer program. 

10. (Original) A method as claimed in claim 1 , wherein said core computer program 
is an anti-virus computer program. 

1 1 . (Original) A method as claimed in claim 10, wherein said anti-virus computer 
program operates with at least one updateable anti-virus computer program module. 

12. (Cancelled) 

13. (Original) A method as claimed in claim 1 , wherein said additional computer 
program module provides functionality independent of that of said core computer 
program. 
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14. (Currently Amended) A method as claimed in claim 10, wherein said additional 
computer program module provides does not relate to anti-virus protection. 

15. (Original) A method as claimed in claim 1 , wherein said additional computer 
program module is operable to patch an installed computer program. 

16. (Original) A method as claimed in claim 1, wherein said additional computer 
program module is operable to install another computer program. 

17. (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1, said method comprising the steps of: 

writing said additional computer program module; 

receiving new user information from a new user of said additional computer 
program module; 

generating user signature data specific to said new user in dependence upon said 
new user information; 

associating said user signature data with said additional computer program 
module; and 

providing said additional computer program module with associated user 
signature data to said new user. 

1 8. (Original) A method as claimed in claim 17, wherein said step of generating uses 
a tool produced by a provider of said core computer program. 

19. (Original) A method as claimed in claim 18, wherein said step of associating uses 
a tool produced by a provider of said core computer program. 

20. (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1, said method comprising the steps of: 
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writing said additional computer program module; 

generating signature data specific to said additional computer program module in 
dependence upon said additional computer program module using a tool produced by a 
provider of said core computer program; 

associating said signature data with said additional computer program module; 

and 

providing said additional computer program module with associated signature 
data to said new user. 

21. (Original) A method of generating an additional computer program module for 
use with a core computer program when authorised in accordance with the method of 
claim 1, said method comprising the steps of: 

writing said additional computer program module; 
providing said additional computer program module to a new user; 
said new user associating user signature data with said additional computer 
program module; 

providing said additional computer program module and associated user signature 
data to a provider of said core computer program; 

said provider of said core computer program associating core signature data with 
said additional computer program module and associated user signature data; 

providing said additional computer program module and associated user signature 
data and core signature data to said new user. 

22. (Currently Amended) Apparatus for authorising an additional computer program 
module for use with a core computer program, said core computer program being 
installed, said apparatus comprising: 

first reading logic operable to read module signature data associated with said 
additional computer program module; 

second reading logic operable to read core signature data and other signature data 
associated with said core computer program; 

wherein said other signature data is user signature data: 
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a comparitor operable to compare said module signature data with said core 
signature data and said module user signature data; and 

authorisation refusal logic operable to refuse authorisation of said additional 
computer program module for use with said core computer program unless said module 
signature data matches at least one of said core signature data and said ether user 
signature data; 

wherein the user signature data allows a particular user to authorize the additional 
computer program module for use with the installed core computer program . 

23. (Cancelled) 

24. (Currently Amended) Apparatus as claimed in claim 22, wherein said additional 
computer program module is refused authorisation for use with said core computer 
program unless said module signature data matches both of said core signature data and 
said o th e r user signature data. 

25. (Currently Amended) Apparatus as claimed in claim 22, wherein said module 
signature data, said core signature data and said other user signature data include public 
key infrastructure signatures. 

26. (Currently Amended) Apparatus as claimed in claim 22, wherein said other user 
signature data is associated with said core computer program upon installation of said 
core computer program. 

27. (Currently Amended) Apparatus as claimed in claim 26, wherein said oth e r user 
signature data is embedded within said core computer program. 

28. (Currently Amended) Apparatus as claimed in claim 23, wherein said ether user 
signature data is embedded within said core computer program by applying a user 
specific patch to said core computer program. 
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29. (Original) Apparatus as claimed in claim 22, wherein said core signature data is 
associated with said core computer program upon generation of said core computer 
program. 

30. (Original) Apparatus as claimed in claim 29. wherein said core signature data is 
embedded within said core computer program. 

3 1 . (Original) Apparatus as claimed in claim 22, wherein said core computer program 
is an anti-virus computer program. 

32. (Original) Apparatus as claimed in claim 3 1 , wherein said anti-virus computer 
program operates with at least one updateable anti-virus computer program module. 

33. (Cancelled) 

34. (Original) Apparatus as claimed in claim 22, wherein said additional computer 
program module provides functionality independent of that of said core computer 
program. 

35. (Currently Amended) Apparatus as claimed in claim 31, wherein said additional 
computer program module provides does not relate to anti-virus protection. 

36. (Original) Apparatus as claimed in claim 22, wherein said additional computer 
program module is operable to patch an installed computer program. 

37. (Original) Apparatus as claimed in claim 22, wherein said additional computer 
program module is operable to install another computer program. 

38. (Currently Amended) Apparatus for generating an additional computer program 
module for use with a core computer program when authorised using the apparatus of 
claim 22, said apparatus comprising: 



PAGE 10/20 * RCVD AT 7/1 3/2004 3:47:28 PM [Eastern Daylight Time] * SVR;USPTO-EFXRF-1/1 * DNI8: 8729306 * C8ID:408 971 4680 * DURATION (mm -ss): 06-26 



Jul 15 04 01:5Gp SVIPG 



408 971 4660 



p. 11 



-8- 

a receiver operable to receive new user information from a new user of said 
additional computer program module; 

a user signature generating logic operable to generate user signature data specific 
to said new user in dependence upon said new user information; 

associating logic operable to associate said user signature data with an additional 
computer program module; and 

transmission logic operable to providemg said additional computer program 
module with associated user signature data to said new user. 

39. (Original) Apparatus as claimed in claim 38, wherein said user signature 
generating logic uses a tool produced by a provider of said core computer program. 

40. (Original) Apparatus as claimed in claim 38, wherein said associating logic uses a 
tool produced by a provider of said core computer program. 

41 . (Original) Apparatus for generating an additional computer program module for 
use with a core computer program when authorised using the apparatus of claim 22, said 
apparatus comprising: 

signature generating logic operable to generate signature data specific to said 
additional computer program module in dependence upon said additional computer 
program module using a tool produced by a provider of said core computer program; 

associating logic operable to associate said signature data with said additional 
computer program module; and 

transmission logic operable to provide said additional computer program module 
with associated signature data to said new user. 

42. (Original) Apparatus of generating an additional computer program module for 
use with a core computer program when authorised using the apparatus of claim 22, said 
apparatus comprising: 

first transmission logic operable to provide said additional computer program 
module to a new user; 
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first associating logic operable to associate user signature data with said 
additional computer program module; 

second transmission logic operable to provide said additional computer program 
module and associated user signature data to a provider of said core computer program; 

second associating logic operable to associate core signature data with said 
additional computer program module and associated user signature data; 

third transmission logic operable to provide said additional computer program 
module and associated user signature data and core signature data to said new user. 

43. (Currently Amended) A computer program product carrying a computer program 
for controlling a computer to authorise an additional computer program module for use 
with a core computer program, said core computer program being installed, said 
computer program comprising: 

first reading code operable to read module signature data associated with said 
additional computer program module; 

second reading code operable to read core signature data and other signature data 
associated with said core computer program; 

wherein said other signature data is user signature data; 

comparison code operable to compare said module signature data with said core 
signature data and said module signature data; and 

authorisation refusal code operable to refuse authorisation of said additional 
computer program module for use with said core computer program unless said module 
signature data matches at least one of said core signature data and said oth e r user 
signature data^ 

wherein the user signature data allows a particular user to authorize the additional 
computer program module for use with the installed core computer program . 

44. (Cancelled) 
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45. (Currently Amended) A computer program product as claimed in claim 43, 
wherein said additional computer program module is refused authorisation for use with 
said core computer program unless said module signature data matches both of said core 
signature data and said other user signature data. 

46. (Currently Amended) A computer program product as claimed in claim 43, 
wherein said module signature data, said core signature data and said oth e r user signature 
data include public key infrastructure signatures. 

47. (Currently Amended) A computer program product as claimed in claim 43, 
wherein said oth e r user signature data is associated with said core computer program 
upon installation of said core computer program. 

48. (Currently Amended) A computer program product as claimed in claim 47, 
wherein said oth e r user signature data is embedded within said core computer program. 

49. (Currently Amended) A computer program product as claimed in claim 44, 
wherein said oth e r user signature data is embedded within said core computer program by 
applying a user specific patch to said core computer program. 

50. (Original) A computer program product as claimed in claim 43, wherein said core 
signature data is associated with said core computer program upon generation of said 
core computer program. 

5 1 . (Original) A computer program product as claimed in claim 50, wherein said core 
signature data is embedded within said core computer program. 

52. A computer program product as claimed in claim 43, wherein said core computer 
program is an anti-virus computer program. 
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53. (Original) A computer program product as claimed in claim 52, wherein said anti- 
virus computer program operates with at least one updateable anti-virus computer 
program module. 

54. (Cancelled) 

55. (Original) A computer program product as claimed in claim 43, wherein said 
additional computer program module provides functionality independent of that of said 
core computer program. 

56. (Currently Amended) A computer program product as claimed in claim 52, 
wherein said additional computer program module provid e s does not relate to anti-virus 
protection. 

57. (Original) A computer program product as claimed in claim 43, wherein said 
additional computer program module is operable to patch an installed computer program. 

58. (Original) A computer program product as claimed in claim 43, wherein said 
additional computer program module is operable to install another computer program. 

59. (Currently Amended) A computer program product carrying a computer program 
for controlling a computer to generate an additional computer program module for use 
with a core computer program when authorised using the computer program of claim 43, 
said computer program comprising: 

receiver code operable to receive new user information from a new user of said 
additional computer program module; 

user signature generating code operable to generate user signature data specific to 
said new user in dependence upon said new user information; 

associating code operable to associate said user signature data with an additional 
computer program module; and 
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transmission code operable to provideieg said additional computer program 
module with associated user signature data to said new user. 

60. (Original) A computer program product as claimed in claim 59, wherein said user 
signature generating code uses a tool produced by a provider of said core computer 
program. 

61 . (Original) A computer program product as claimed in claim 59, wherein said 
associating code uses a tool produced by a provider of said core computer program. 

62. (Original) A computer program product carrying a computer program for 
controlling a computer to generate an additional computer program module for use with a 
core computer program when authorised using the computer program of claim 43, said 
computer program comprising: 

signature generating code operable to generate signature data specific to said 
additional computer program module in dependence upon said additional computer 
program module using a tool produced by a provider of said core computer program; 

associating code operable to associate said signature data with said additional 
computer program module; and 

transmission code operable to provide said additional computer program module 
with associated signature data to said new user. 

63. (Original) A computer program product carrying a computer program for 
controlling a computer to generate an additional computer program module for use with a 
core computer program when authorised using the computer program of claim 43, said 
computer program comprising: 

first transmission code operable to provide said additional computer program 
module to a new user; 

first associating code operable to associate user signature data with said additional 
computer program module; 



PACE 15/20 ' RCVD AT 7/15/2004 5:47:28 PM [Eastern Daylight Time] * SVR:USPTO-EFXRF-1/1 * DNIS: 8729306 * CS1D:408 971 4660 * DURATION <mm-ss):06-26 



Jul 15 04 01:57p SVIPG 



408 971 4G60 



p. 1G 



-13- 

second transmission code operable to provide said additional computer program 
module and associated user signature data to a provider of said core computer program; 

second associating code operable to associate core signature data with said 
additional computer program module and associated user signature data; 

third transmission code operable to provide said additional computer program 
module and associated user signature data and core signature data to said new user. 

64. (New) The method as claimed in claim 1 , wherein said user signature data is 
utilized to authorize said additional computer program module which is from a third party 
for use with said core computer program. 

65. (New) The method as claimed in claim 1 , wherein said user signature data is 
utilized to authorize said additional computer program module which is generated by said 
user for use with said core computer program. 

66. (New) The method as claimed in claim 1 , wherein said core computer program 
keeps a list of module providers which have been previously authorized by said user 
signature data, such that said user signature data becomes associated with additional 
computer program modules provided by module providers indicated on said list. 
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